Kentik

JUNE 7, 2023

They capture detailed information about network traffic, including: Source and destination IP addresses Ports Protocols Packet counts By analyzing these logs, you can gain visibility into the volume, patterns, and characteristics of traffic, such as whether it’s being dropped or incorrectly routed, to identify connectivity issues.

Cloud 97

Cloud Gateway Port IP Address 97

NW Kings

JANUARY 7, 2025

In this blog, we will explore what static routes are, how they differ from dynamic routes, and how to configure them on routers like Cisco devices. This characteristic makes them efficient for routers with limited processing capabilities. What are the key features of static routes? How can I configure static routes?

Routers 52

Routers IP Address Protocol Topology 52

Kentik

MARCH 13, 2019

A common DDoS mitigation technique is Remotely-Triggered Black Hole (RTBH), which requires extensive pre-configuration of discard routes and/or uRPF on all edge routers. For destination-based RTBH, the victim’s destination IP address becomes completely unreachable. IP Protocol. Destination port. Source port.

IP Address 49

IP Address Port Routers DNS 49

The Network DNA

NOVEMBER 26, 2024

NDNA-ASA(config)# interface gi1/2 NDNA-ASA(config-if)# nameif inside NDNA-ASA(config-if)# ip address 10.10.10.1 NDNA-ASA(config-if)# ip address 112.23.16.11 255.255.255.0

Firewall 52

Firewall VPN IP Address Port 52

The Network DNA

NOVEMBER 26, 2024

Cisco ASA in a Network Configuring DHCP, AAA, and SSH NDNA-ASA(config)# dhcpd address 10.10.10.3-10.10.10.100 NDNA-ASA(config)# dhcpd option 3 ip 10.10.10.1 Configure address translation using PAT and network objects NDNA-ASA(config)# object network INSIDE-NET NDNA-ASA(config-network-object)# subnet 10.10.10.0 255.255.255.0

Firewall 52

Firewall IP Address VPN Port 52

Kentik

FEBRUARY 8, 2016

An internal routing scheme so that every router in a given AS knows how to get to every other router and destination within the same AS. One or multiple border routers. This peering connection is used by border routers in one AS to “advertise” routes to border routers in a different AS (more on this below).

Advertising 49

Advertising Routers Internet Protocol 49

CATO Networks

JANUARY 17, 2018

In some cases, network scanners will use port scans and in other cases ping sweeps. Attackers may try to gain control of IoT devices or routers, control them using a bot that may be used later for DDoS attacks (such as the Mirai botnet ) or even cryptocurrencies mining, which are very popular these days. What is Network Scanning?

Network 52

Network Networking Server Port 52

Kentik

JUNE 30, 2015

We were one of SprintLink’s first BGP customers, and we had dozens of Cisco and Wellfleet routers. Were our servers talking to each other on weird ports? And we had hundreds of “big” Cisco routers that were capable of generating Cisco’s new NetFlow network data. Between 2001 and 2011, NetFlow export from routers matured.

Routers 40

Routers Port Server Network 40

Kentik

JUNE 6, 2016

Flow analytics and reporting can tell you that two IP addresses are streaming Pandora all day, another IP address is torrenting software, and yet another is using Netflix. But those analytics can’t immediately tell you who’s using those IP addresses. For that, real-time visibility is a must. The bottom line.

Network 40

Network Networking IP Address Bandwidth 40

Kentik

APRIL 3, 2023

You can modify the program to capture other information as well, such as the number of retransmit attempts or the source and destination IP addresses of the affected packets. Second, in a busy network, devices such as routers, switches, and firewalls may be very busy operating at a relatively high CPU.

TCP 110

TCP Application Virtual machine Network 110

Kentik

JULY 20, 2018

Once NetFlow is enabled on a router or other network device, it tracks unidirectional statistics for each unique IP traffic flow, without storing any of the payload data carried in that session. Juniper MX and PTX series routers (via IPFIX). Alcatel-Lucent routers. Huawei routers. Cisco Catalyst switches.

Routers 40

Routers IP Address Protocol Server 40

Kentik

MARCH 28, 2016

To make it work, routers were equipped to read packet headers and use field values to group the packets. Starting with the basic ACLs of the mid 90s, the first flow fields added were IP addresses, ports, and protocol. What about capturing MAC address, or VLAN tag, or IPv6? More of a good thing.

Protocol 40

Protocol Routers MPLS IP Address 40

Kentik

DECEMBER 2, 2015

Here’s how these types of schemes work: The spammer sends a SYN from a spoofed source IP address to TCP port 25 (SMTP) on the target mail server. First, we’ll write a query to get a list of all the hosts in the network that are receiving traffic from remote source port TCP/25 (the traffic described in Step 2 above).

TCP 40

TCP Protocol Port IP Address 40

Kentik

APRIL 18, 2016

sFlow, which has been available in switches and routers since 2001, is the brainchild of InMon Corporation, whose continued control over the protocol is both benevolent and absolute. sFlow, on the other hand, is based on interface counters and flow samples created by the network management software of each router or switch.

Protocol 40

Protocol Routers Encryption IP Address 40

Kentik

APRIL 24, 2017

For example, with a forged source-address DDoS attack, every packet can be a flow, and routers have to try to maintain massive tables on the fly to track those flows! sFlow, on the other hand, is based on interface counters and flow samples created by the network management software of each router or switch.

Protocol 40

Protocol Routers Bandwidth Internet 40

Kentik

MARCH 6, 2019

In the Kubernetes networking model, in order to reduce complexity and make app porting seamless, a few rules are enforced as fundamental requirements : Containers can communicate with all other containers without NAT. The IP that a container sees itself as is the same IP that others see it as.

Network 63

Network Networking Application Cloud 63

Kentik

MAY 16, 2016

Tags can be defined based on a number of configuration parameters, including interface description (regex can be used to pull a portion of the name), IP addresses and subnets, device name, and ASN. Top L4 Ports. Top IP Flows. Top Source IPs. Top Destination IPs. Unique Source IPs. Source Country.

Port 40

Port Email Network Networking 40

Kentik

MARCH 21, 2016

For IP networks, the metadata is similar except that instead of phone calls the records document packet flows. In a flow record, the “who” and “whom” are IP addresses and port numbers, and the “how long” is byte and packet counts. Note that these records do not include the actual contents of the conversations.

Network 40

Network Networking IP Address Port 40

Kentik

JULY 28, 2021

Bad hardware (the switch or router port). Overwhelmed router. Congestion in the form of high-connection utilization or an overworked router in the path is another common source of trouble. TCP traceroute : A TCP trace reaches out to every router in the path to a target destination. UDP vs. TCP. TTL expired.

Cloud 116

Cloud TCP Routers Protocol 116

Kentik

MAY 17, 2021

And it’s not like the network teams had to worry about fixing failed line cards or erroring ports. Fifteen years ago you couldn’t launch a new business or even run a school without having a server, a switch, and a router sitting in a rack somewhere. to the raw source and destination IP addresses in your VPCs.

Cloud 52

Cloud Network Networking Gateway 52